Route Origin Authorization
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a181e80-c8f6-3da9-8e38-8b11fcb6b352.roa
File: 1a181e80-c8f6-3da9-8e38-8b11fcb6b352.roa (raw, json)
Hash identifier: sttGqdKtC+ov/H1UAHJVgvrVrWNo6lu2DOVXxwRl+GA=
Subject key identifier: EA:55:50:4A:0D:F0:52:A0:FF:41:76:20:EE:76:86:2C:12:9D:C7:48
Certificate issuer: /CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Certificate serial: 010D0C9F4328584099E93A73419E3683B8DA7680
Authority key identifier: B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a181e80-c8f6-3da9-8e38-8b11fcb6b352.roa
Signing time: Mon 16 Jan 2023 12:00:00 +0000
ROA not before: Mon 16 Jan 2023 12:00:00 +0000
ROA not after: Tue 21 Feb 2023 05:00:00 +0000
asID: 8987
IP address blocks: 16.20.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:40:99:e9:3a:73:41:9e:36:83:b8:da:76:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0abc99d4-8139-480b-93d0-1ff86fba04f2
Validity
Not Before: Jan 16 12:00:00 2023 GMT
Not After : Feb 21 05:00:00 2023 GMT
Subject: CN=e2f2cb5b-3304-48e3-a546-06710e324069
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:47:89:f7:1f:14:28:5a:3b:ad:d8:84:71:48:
2b:4f:04:bd:79:98:4d:31:c7:d4:02:54:b7:43:fb:
5f:4b:1f:74:57:94:1a:05:6f:0f:fd:ca:d4:ae:08:
3c:38:7c:9f:be:30:ed:52:22:61:7b:2c:14:29:1f:
bd:0b:5d:03:03:d0:29:b0:55:33:13:da:d7:74:49:
02:c5:e8:20:d0:6c:f0:ce:b1:23:54:38:00:ff:ec:
d6:4d:e2:26:67:f9:38:04:97:9f:c3:85:26:e6:f6:
11:05:15:e7:81:31:0f:44:71:4c:8f:c5:aa:6f:ba:
aa:fe:80:36:25:ad:5c:22:a3:a5:8c:37:f1:0f:34:
a8:27:3f:11:c4:b6:5c:b3:92:db:17:a4:64:07:69:
ef:25:00:73:85:59:8a:88:03:42:37:09:c4:0e:67:
98:6a:d8:23:b6:fd:07:d4:50:e3:67:9b:e2:70:de:
96:46:7a:d9:1a:40:b4:16:f0:d8:12:ce:9e:89:c3:
35:f0:93:52:f7:4b:b4:77:0b:f4:2f:da:31:fe:47:
d6:2b:9c:a5:47:e0:c8:c1:29:77:68:42:5c:bd:95:
e7:54:cd:e2:61:38:68:c5:37:87:0d:47:3e:c1:ac:
ea:9c:ca:f7:b0:03:b9:d6:82:77:0e:fa:6e:0e:bd:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:55:50:4A:0D:F0:52:A0:FF:41:76:20:EE:76:86:2C:12:9D:C7:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/1a181e80-c8f6-3da9-8e38-8b11fcb6b352.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2/0abc99d4-8139-480b-93d0-1ff86fba04f2.crl
X509v3 Authority Key Identifier:
keyid:B6:BD:1E:94:16:58:B8:F6:4F:BD:79:1A:73:2C:EE:96:C4:6B:5E:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0abc99d4-8139-480b-93d0-1ff86fba04f2.cer
sbgp-ipAddrBlock: critical
IPv4:
16.20.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0f:b0:d9:50:cf:6b:d1:87:70:c9:96:fe:1d:f2:e0:60:07:
a4:b3:8c:6a:31:a1:90:bf:ad:b7:29:fa:69:83:d6:c3:4a:3a:
fd:f9:bb:72:30:6c:fb:35:c7:5d:79:d3:a0:39:1b:64:79:13:
74:6a:9b:bf:ad:86:19:d0:eb:c7:8d:d0:69:d2:18:ba:7d:35:
0b:9c:20:a5:6f:dd:43:f9:10:d2:c0:9e:b1:9d:89:62:10:67:
00:7a:69:04:6b:a3:d8:e9:82:4c:e4:17:59:f5:41:a6:85:11:
01:39:8c:80:3c:29:be:db:73:cc:04:63:c0:43:1a:67:07:1d:
d8:a2:c3:05:42:95:4c:23:24:94:a5:81:dc:e2:6d:72:53:5f:
1a:75:82:ea:0c:4e:d6:26:71:3d:73:29:7b:a9:90:dd:65:54:
30:db:8f:f8:1f:c8:94:81:ed:62:56:c0:8b:9f:ff:8e:1c:fa:
c6:90:39:82:87:dc:1d:de:c5:6b:3b:76:40:b4:cf:53:64:c0:
6e:3b:68:21:c3:a0:46:50:38:0c:97:af:32:fd:d2:a6:89:13:
9e:6a:f6:e7:c1:5d:aa:b0:9e:fc:26:20:fb:ef:68:b5:b4:0f:
4c:49:f0:74:d2:12:63:cd:36:e3:66:1a:fd:49:24:1d:8d:e5:
e7:4b:4b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:53:05 2025 by rpki-client